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Abstract 



^ ' We show that the full PCF language can be encoded in £rec, a linear A-calculus extended 

O ■ with numbers, pairs and an unbounded recursor that preserves the syntactic linearity of the 

calculus. Thus, £rec is a Turing complete extension of the linear A-calculus. We discuss 
^ evaluation strategies and implementation techniques for Crec, exploiting the linearity of the 

^ . system. 

00 

cn ■ 1 Introduction 

Knowing that an argument to a function is used exactly once — i.e., linearly — is a property that a 
' compiler can make use of to optimise code. It is related to several program analyses, for instance, 

. strictness analysis, pointer analysis, resource analysis (see, e.g., [I4[ ITSl [22l [23l [58l [56l [57l [2T1 137] ) : 

computing these analyses give approximations. Linear functions are also naturally occurring in 
hardware compilation [28]. Circuits are static (i.e., they cannot be copied at run-time), so linear 
computations are more naturally compiled into hardware. 

Linearity has also applications in other domains. For instance, in the area of quantum compu- 
' tation one of the most important results is the no-cloning theorem, stating that qbits cannot be du- 

plicated. Again, a linear calculus captures this [55J. In concurrent calculi, like the 7r-calculus [511, 
a key aspect is the notion of name, and the dual role that names play as communication channels 
and variables. The linear 7r-calculus [46] has linear (use-once) channels. This has clear gains in effi- 
ciency and on program analysis avoiding several problems of channel sharing. Also, inspired by the 
works by Kobayashi, Pierce and Turner [35] and the works by Honda [32] on session types, several 
type systems for the 7r-calculus rely directly on linearity to deal with resources, non-interference 
and effects [Ml 113 [59]. 

In this paper we focus on functional computations. We aim at obtaining a linear, universal 
model of computation that can serve as a basis for the design of programming languages. Our 
approach is to begin with a linear calculus, and build non-linearity in a controlled way. 

Several extensions of the linear A-calculus, based on bounded iteration, proved to capture 
interesting classes of programs (see, e.g., [29l [33l [7l H] [U |36l HH [54]). In particular, previous 
results have shown that primitive recursive functions (PR) can be encoded in linear versions 
of Godel's System T [E]. Furthermore, System £ [4], a linear A-calculus extended with pairs, 
numbers and a bounded iterator, with a closed reduction strategy has all the computation 
power of System T. The latter result shows some redundancy regarding duplication in System T, 
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which can be achieved through iteration or through non-hnear occurrences of the bound variable 
in the body of a function. 

Following this work, the question that arises is, what is the minimal extension of the linear 
A-calculus that yields a Turing complete system, compatible with the notion of linear function? 

From the perspective of recursion theory, Turing completeness can be achieved by adding a 
minimisation operator working on a first-order linear system (using a set of linear initial functions 
and a linear primitive recursion scheme) [3 . A similar result is shown in this paper for the linear 
A-calculus. More precisely, we show that an extension of System C with a minimiser is Turing 
complete. However, it relies on both iteration and minimisation. 

In the context of the simply typed A-calculus, there is an alternative way to obtain a Turing 
complete system, by adding a fixpoint operator (as it is done in PCF |53jV This approach has been 
used to extend linear functional calculi (see, for instance, [JHl ISl [Ml US] ) , however, it relies 
on the existence of a non-linear conditional which throws away a possibly infinite computation 
in one of the branches. Instead, in this paper, we introduce recursion in the linear A-calculus 
through the use of an unbounded recursor with a built-in test on pairs, which allows the encoding 
of both finite iteration and minimisation. More precisely, we define £rec, a linear A-calculus 
extended with numbers, pairs and a linear unbounded recursor, with a closed-reduction strategy. 
We show that C^ec is Turing complete and can be easily implemented: we give an abstract machine 
whose configurations consist simply of a term and a stack of terms. As an application, we give a 
compilation of PCF into £rec- 

Several abstract machines for linear calculi are available in the literature (see for instance |50i 
[571 137] )• The novelty of our approach is that we implement a calculus that is syntactically linear 
(in the sense that each variable is linear in Lj^^ terms) and therefore there is no need to include 
in the abstract machine an environment (or store in the terminology of [57] ) to store bindings for 
variables. 

Summarising, the main contributions of this paper are the following: 

• We define >Crec, a linear A-calculus extended with numbers, pairs and an unbounded recursor, 
with a closed-reduction strategy. We show some properties regarding reduction (such as 
subject-reduction and confluence), and prove that C^ec is Turing complete by encoding the 
set of partial recursive functions in £rec- 

• We give call-by-name and call-by-value evaluation strategies, and define a simple abstract 
machine for Cjea exploiting its linearity. 

• We study the interplay between linearity and recursion based on fixpoint combinators, and 
define an encoding of PCF in £rec- 

• By combining the two previous points, we obtain a new implementation of PCF via a simple 
stack-based abstract machine. 

Related notions of linearity Three notions of linearity have been defined for functional calculi 
in the literature: syntactical, operational and denotational. Operational linearity means that 
arguments of functions cannot be duplicated or erased during evaluation (cf. weak linear terms [5] 
and simple terms |43) ) . Denotational linearity is achieved when only linear functions can be defined 
in the language [IT] [55]. The language defined in [55] is a linear version of PCF in a denotational 
sense: it has a linear model (linear coherence spaces) but its terms can contain more than one 
occurrence of the same variable. Finally, syntactical linearity, requires a linear use of variables in 
terms [40]. 

Operational linearity has great impact when the control of copying and deleting is important, 
as it can be used to efficiently implement garbage collection for instance. Note however that 
checking if a term is operationally linear relies on the evaluation of the term. For the linear A- 
calculus, syntactical linearity, which can be statically checked, implies operational linearity. For 
£rec, which combines syntactical linearity with closed reduction, the fragment without recursion is 
operationally linear; erasing and duplication can only be done by the recursor (in linear logic [30] 
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this is done by the use of exponentials, and in other linear calculi [TJ UHl IMl [ST] by explicit 
syntactical constructs). Moreover, only closed terms can be erased or duplicated in £rec, thanks 
to the use of a closed reduction strategy. 

The rest of this paper is structured as follows. In the next section we introduce basic concepts 
and notations that will be needed in the rest of the paper. We give the syntax and type system of 
System Crec together with some standard properties in Section |3l In Section |4] we study evaluation 
strategies and abstract machines. In Section [5] we look at the relation with PCF. Finally, we 
conclude in Section [6l 

2 Background 

We assume the reader is familiar with the A-calculus [10]. In this section we recall the definition 
of System £ [4l, a linear version of Godel's System T (for details on the latter see |32|). 

The terms of System C are obtained by extending the terms of the linear A-calculus [1 with 
numbers, pairs, and an iterator. Linear A-terms t,u, . . . are inductively defined by: a; € A, Xx.t G A 
if a; G fv(t), and G A if fv(t) n fv(u) = 0. Note that x is used at least once in the body of the 
abstraction, and the condition on the application ensures that all variables are used at most once. 
Thus these conditions ensure syntactic linearity (variables occur exactly once). In System C we 
also have numbers generated by and S, with an iterator: 

iter tuv a fv(i) n fv(u) = fv(u) n fv(i;) = fv(t;) n fv(<) = 

and pairs: 

(t, u) if fv(t) n fv(u) 

let (x, y) = t ±Tiu if y e fv(u) and 

fv(t)n(fv(u)-{a;,j/}) = 

Since A and let are binders, terms are defined modulo a-equivalence as usual. 

Note that when projecting from a pair, we use both projections. A simple example is the 
function that swaps the components of a pair: Ax. let (y, z) — x ±n (z, y). In examples below we use 
tuples of any size, built from pairs. For example, {xi,X2,X3) = {xi, {x2, x^)) and let {xi, X2, x^) = 
u Int represents the term let {xi, y) = u in let {x2, X3) = y int. 

System £ uses a closed reduction strategy (first defined by Girard [31] for cut elimination in 
linear logic, and adapted to the A-calculus in [24] ) . This strategy for cut elimination is simple 
and exceptionally efficient in terms of the number of cut elimination steps. In the A-calculus, it 
avoids a-conversion while allowing reductions inside abstractions (in contrast with standard weak 
strategies), thus achieving more sharing of computation. 

The reduction rules for System C are given in Table [TJ Substitution is a meta-operation defined 
as usual, and reductions can take place in any context. 



Name 


Reduction 




Condition 


Beta 


{Xx.t)v 


t[v/x] 


fv(i;) = 


Let 


let {x,y) = {t,u) in u — 5- 


iv[t/x])[u/y] 


fv(t) = fv(u) = 


Iter 


iter {S t) u V — 5- 


u(iter t u v) 


fv(i;) = 


Iter 


iter uv — > 


u 


fv(w) = 



Table 1: Closed reduction in System C 

Note that all the substitutions created during reduction (rules Beta and Let) are closed (thus, 
there is no need to perform a-conversions during reduction), and the Iter rules are only triggered 
when the function v is closed. Thanks to the use of a closed reduction strategy, iterators on 
open linear functions are accepted in System C (since these terms are syntactically linear), and 
reduction preserves linearity. Normal forms are not the same as in the A-calculus (for example, 
Xx.{Xy.y)x is a normal form), but closed reduction is still adequate for the evaluation of closed 
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Construction Variable Constraint Free Variables (fv) 

- 

S t - fv(t) 

rec ti t2 h U fv(tj) n fv(tj) = 0, for i ^ j Ufv(ti) 



X 




{x} 




tu 


fv(f) n fv(u) = 


fv(i) U fv(u) 


Xx.t 


X e fv(t) 


fv(t) \ 


{x} 


{t,u) 


fv(i) n fv(u) = 


fv(i) U fv(M) 


let {x,y) 


= i in M x,y G fv(M), fv(t) n fv(u) = 


Mt)U{fs/{u)\{x,y}) 


Table 2: Terms in System C^ec 


Name 


Reduction 




Condition 


Rec 


rec (0, t') u V w — !• u 




fv{t'vw) = 


Rec 


rec (S t,t') u V w v(rec {w{t,t')) 


U V w) 


fv(wu') = 



Table 3: Closed reduction for recursion 



terms (if a term has a weak head normal form, it will be reached [1]). Closed reduction can also 
be used to evaluate open terms, using the "normalisation by evaluation" technique |12j as shown 
in |241 [5S] (in the latter director strings are used to implement closedness tests as local checks on 
terms). 

Although linear, some terms are not strongly normalising. For instance, AA where A = 
Aa;.iter S^O (Xxy.xy) {Xy.yx) reduces to itself. However, the linear type system defined in [i] 
ensures strong normalisation. System C has all the power of System 7"; we refer to j4j for more 
details and examples. 

3 System ^rec^ syntax and properties 

System C is not Turing complete. In this section we define >Crecj an extension of the linear A- 
calculus [T] with numbers, pairs, and a typed unbounded recursor with a closed reduction strategy 
that preserves syntactic linearity. We prove that this system is Turing complete. 

The syntax of System £rec is similar to that of System £, except that instead of a bounded 
iterator we have a recursor working on pairs of natural numbers. Table [2] summarises the syntax 
of terms in £rec. We assume Barendregt's convention regarding names of free and bound variables 
in terms. 

The reduction rules for Crec are Beta and Let, given in Table [1] together with two rules for the 
recursor shown in Table [3l 

Note that the Rec rules are only triggered when the closedness conditions hold, thus linearity 
is preserved by reduction. The conditions on Beta and Let are orthogonal to the linearity issues 
(as explained in the previous section, they simply produce a more efficient strategy of reduction) 
and do not affect the technical results of the paper (even with these conditions, the system will 
be shown to be Turing complete). 

The Rec rules pattern-match on a pair of numbers (the usual bounded recursor works on a 
single number). This is because we are representing both bounded and unbounded recursion with 
the same operator (as the examples below illustrate). An alternative would be to have an extra 
parameter of type N in the recursor. 
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3.1 Examples 

Bounded iteration Using the recursor we can encode System C's iterator. Let / be the identity 
function Xx.x. We define "iter" in System C^ec as foUows: 

"iter" t u v'^^ rec {t, 0) u v I 
We will show later that this term has the same behaviour as System £'s iterator. 

Projections and duplication of natural numbers We can define projections for pairs (a, b) 
of natural numbers, by using them in a recursor. 

pri — Ax. let (a, 6) = a; in rec (6, 0) a I I 
— Ax. let (a, 6) = a; in rec (a, 0) b I I 

The following function C can be used to copy numbers: 

C = Ax. rec {x, 0) (0, 0) (Ax. let x = (a, b) in (Sa, Sb)) I 

Other mechanisms to erase and copy numbers in Crec will be shown later. 

Arithmetic functions We can now define some arithmetic functions that we will use in the 
paper. 

• add = Amn.rec (m, 0) n (Ax.Sx) /; 

• mult = AmTi.iter m (add n); 

• pred = An.pri(rec (n, 0) (0,0) F I) 

where F — Ax. let {t, u) ~ C{pr2 x) in {t, S u)); 

• iszero = Xn.pr^{rec {n,0) (0, S 0) {Xx.C{pr2 x)) /). 

The correctness of these encodings can be easily proved by induction. 

Minimisation We can also encode the minimisation operator /i/ used to define partial recursive 
functions. Recall that if / : N — > N is a total function on natural numbers, /i/ = min{x G N 
/(x)=0}. 

Let / be a closed A-term in C^ec representing a total function / on natural numbers. The 
encoding of /iy is 

M = rec (70,0) (Ax.S(x)) F 

where F = Ax. let {y,z) = C{pr2x) in {f{Sy),Sz). We prove the correctness of this encoding 
below. 

3.2 Types for System £rec 

We consider linear types generated by the grammar: 

A,B ::= N I A^B I A® S 

where N is the type of numbers. A type environment F is a list of type assumptions of the form 
X : A where x is a variable and A a type, and each variable occurs at most once in F. We write 
dom(F) to denote the set of variables that occur in F. 

We write T he t ■ A ii the term t can be assigned the type A in the environment F using the 
typing rules in Table ID Note that the only structural rule is Exchange, we do not have Weakening 
and Contraction rules: we are in a linear system. For the same reason, the logical rules split the 
context between the premises (i.e., the variable conditions in Table [5] are enforced by the typing 
rules). 

All the terms given in the examples above can be typed. 
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Axiom and Structural Rule: 



(Axiom) ^ : 1 (Exchange) 



x:A^cx:A T,y: B,x : A, A \-c t : C 

Logical Rules: 

r,x:A\-ct:B r\-ct:A^B A\-cu:A 

(^Intro) (— oElim) 



(Rec) 



r l-£ Xx.t -.A^B T,A\-ctu:B 

r h£ I : A Ahc II ■■ B r h£ / : .1 ; B a. : .1. 1/ : Bhc II --C 

((g)lntro) (ig)Elim) 

r,A\-c {t,u) : A<»B r,A\-clet {x,y) =t in u:C 

Numbers 

/T ^ r l-£ n : N 
— — - (Zero) f (succ) 

^cO-f^ r l-£ S n : N 

ri-£t:N(8)N @\-cu: A A\-cv : A^A SI-£«;:N(g)N^N(g)N 
T,Q,A,T,\-c red u V w: A 

Table 4: Type System for System Crec 

Theorem 1 (Properties of reductions in System Lrec) 

1. IfVrct-.T then dom{T) = fv(i). 

2. Subject Reduction: Reductions preserve types. 

3. Church-Rosser: System £rec is confluent. 

4- Adequacy: If \-c t : T in System £rec; o,nd t is a normal form, then: 

T = N ^ t = S(S...(SO)) 

T = A^B t= {u,s) 

T = A^B t = Xx.s 

5. System £rec is not strongly normalising, even for typeable terms. 

Proof: 

1. By induction on type derivations. 

2. By induction on type derivations, using a substitution lemma as usual. We show the case 
where the term has the form rec {t, t') u v w (for the other cases, the proof is the same as 
for System £). 

Assume F l-£ rec {t,t') u v w : A. If the reduction takes place inside t, t', u, v or w the 
property follows directly by induction. If the reduction takes place at the root, there are 
two cases: 

(a) rec (0, t') u v w u ii f\/{t'vw) = 0. Then, by part 1, dom{T) = fv(rec (0, t') u v w) = 
fv{u). The type derivation may end with (Exchange), in which case the result is trivial, 
or with (Rec), in which case the derivation has conclusion F l-£ rec {0,t') u v w : A 
with premises: h£ (0, t') : N (g) N, Thcu: A, h^viA^A, l-£ w : N (g) N -o N N. 
Therefore the property holds. 
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(b) rec (S t,t') u v w ^ v{rec {w{t,t')) u v w) ii f\/{vw) = 0. Reasoning in a similar way, 
we note that when the type derivation ends with an application of the rule (Rec), it has 
conclusion F, A he rec (St, t') u v w : A with premises F |-£ (St, t') : N (3 N, A h£ u : A, 
\-c V : A -o A, and h£ uj : N ® N -<3 N ® N. If F h£ (St,t') : N ® N, then we can 
deduce F l-£ {t, t') ■.N(g> N, therefore we have F he w{t, f ) : N (g) N. Thus we can obtain 
F, A l-£ rec {w{t, t')) u v w : A. From these we deduce F, A l-£ v{rec w{t, t') u v w) : A 
as required. 

3. Confluence can be proved directly, using Martin-Lof's technique (as it was done for System 
jC, see [2]) or can be obtained as a consequence of Klop's theorem for orthogonal higher-order 
reductions [44] , 

4. By induction on t. li t = 0, Xx.t' or (^1,^2), then we are done. Otherwise: 

• If t = S t, it follows by induction. 

• li t — rec to ti ^2 ^3. Since t is in normal form, so are the terms ti. Since t is typable, 
<o must be a term of type N N, and by induction, to is a pair of numbers. But then 
one of the recursor rules applies (contradiction). 

The cases of application and let are similar. 

5. A non-terminating typable term (using the encoding of a fixpoint operator), is described in 
Section 13.31 

□ 



3.3 The computational power of System £|.ec 

We now prove that System C^ec is Turing complete. First note that although in the linear A- 
calculus we are not able to discard arguments of functions, terms are consumed by reduction. The 
idea of erasing by consuming is related to the notion of Solvability (see [TO] , Chapter 8) as it relies 
on reduction to the identity. Using this technique, in [2] S] it is shown that in System C there is 
a general form of erasing. We next apply this technique to System iZrec- 

The term 8{t,A) defined below erases a term t of type A, under certain conditions. In the 
definition we use a function M. to build a term of a specific type {E and M. are mutually recursive) . 

Definition 1 (Erasing) IfThct:A, then E{t,A) is defined as follows: 

£it,N) = rec {t,0) I I I 

£{t,A(E,B) = let {x,y) ^t in £{x,A)£{y,B) 

£{t,A^B) = £{tM{A\B) 

and 

M{H) = 

M{A®B) = {M{A),M{B)) 

M{A^B) = Xx.£{x,A)M{B) 

Theorem 2 1. IfThct:T then F |-£ £{t, T) : B ^ B, for any type B. 

2. M{T) is closed and typeable: he M{T) : T. 

3. For any type T, £{M{T),T) I. 

4- A4{T) is normalisable. 

Proof: The first two parts are proved by simultaneous induction on T, as done for System £ [4]. 
The third part is proved by induction on T. 

• If T = N, then M{T) = 0, and £{0, N) = rec (0, 0) / / / ^ /. 
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• lfT = A(»B, then M{A®B) = {M{A),M{B)), then 

£{{M{A),M{B)),A(E)B) = let {x,y) = {M{A),M{B)) In £{x,A)£{y,B) 

(I.H.) 

^ £{M{A),A)£{M{B),B) II ^ I 
Note that, by mduction, £{M{A),A) I and £{M{B),B) ->* /. 

• IfT = A^B then MiT) ^ \x.£{x, A)M{B), therefore 

£{Xx.£{x,A)M{B),A^B) 
= £i{Xx.£{x,A)M{B))M{A),B) 
£{£{M{A),A)MiB),B) 

(I.H.) (I.H.) 

^* £{IM{B),B) £(MiB),B) I 

The last part is proved by induction on T. □ 

£rec, unhke System C, is not normahsing, and there are terms that cannot be erased using this 
definition. There are even normahsing terms that cannot be erased by reduction. For example, 
consider the following term Yn which represents a fixpoint operator (more details are given in 
Section [5]): 

= A/.rec (S(0), 0) / (Aa:.let (y, z) = x in {S{y),z)) 

This term is typable (it has type (N —o N) — o N)) and is a normal form (the recursor rules do 
not apply because / is a variable). However, the term 

£:(Yn,(N ^ N) ^ N) = rec {Yn{Xx.£{x,N)0),0) III 

does not have a normal form. On the positive side, closed terms of type N, or tuples where the 
elements are terms of type N, can indeed be erased using this technique. Erasing "by consuming" 
reflects the work that needs to be done to effectively dispose of a data structure (where each 
component is garbage collected). 

Theorem 3 Let T be a type generated by the grammar: A, B ::= N \ AiS) B. Ifhct:T and t has 
a normal form, then £{t,T) — >* /. 

Proof:By induction on T. 

• If T = N, then £{t, T) ~ rec (t, 0) 1 1 1. Since t is normalising, t v, and by the Adequacy 
result (Theorem m, v = S"0, n>0. Therefore rec (<, 0) I I I ^* rec (S"0,0) I I I ^* I. 

• If T = ^ ® _B: £{t,T) = let {x,y) = t in £{x, A)£{y, B). Since t is normalisable then, 
by Adequacy (Theorem [1]), t —>* v = {u,s). Thus let {x,y) = t in £{x,A)£{y,B) 
let (x, y) = {u, s) in £{x, A)£{y, B) £{u, A)£{s, B). By induction hypothesis £{u, A) — )►* 
/ and £{s, B) /, therefore £[u, A)£{s, B) ^* II I. 

□ 

There is also a mechanism to copy closed terms in Crec- 
Definition 2 (Duplication) Define : A ^ A® A as: 

Xx.rec (S(S 0),0) {M{A),M{A)) F I 

where F — (Ay. let (z, w) = y in £{z, A){w, x)). 

Theorem 4 If\-ct: A then t {t,t). 
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r h£ t : N 

rh£(i,0):N®N e\-cu:A Ah^wiA-oA h^/iN^N^N^N 
r, e, A |-£ rec {t,0) uv I : A 

Figure 1: Type derivation for "iter" t uv 



Proof:By the definition of — 

D'^t rec {S{SO),0) {M{A),M{A)) (Xy. let {z,w) = y in £{z, A) {w,t)) I 

^* (Ay.let {z,w) = y ±n £{z, A){w,t))'^ {MiA), M{A)) 
^* (Ay.let {z,w) = y ±n siz, A) {w,t))'^ {M{A), MiA)) 

(Ay.let {z,w) = y ±n £{z, A){w,t)){£{M{A), A){M{A) ,t)) 
">* (Ay.let {z,w) = y ±n £{z, A){w,t)){M{A),t) 
^* £{M{A),A){t,t) ^* {t,t) 



□ 



Tlie encoding of System £'s iterator, defined in Section [Q] belraves as expected. System C is 
a sub-system of £rec- 



Proposition 1 



Proof: 
• lit 



"iter "tuv-^* u ift^* 0, fv(w) = 

"\ter" tuv-^* ?;("iter"ti u v) ift-^* S(ti),fv(w) = 



"iter" t w u =^ rec (t, 0) u v I rec (0, 0} u w / -J> u, if fv(u) = 



• If i ^* S(ti): 

"iter" t uv '^^ rec (t, 0) u v I rec (S(ti), 0) u u / 
^ v{rec l{ti,0) u v I), if f\/{tiv) = 

def 

-> w(rec (ii,0) u v I) = u("iter" ti uv) 

□ 

If r h£ i : N, e h£ w : A, and A |-£ w : A -o A, then r,e, A h£ rec (t,0) u v I : A, that is 
"iter" t u V is properly typed in System £rec, as shown in Figure [TJ 

Corollary 1 System C,ec has all the computation power of System C, thus, any Junction definable 
in System T can he defined in £rec- 



We now show that the encoding of the minimiser given in Section 13.11 behaves as expected. 

Theorem 5 (Minimisation in System £rec) Let f he a closed X-term in Crec, encoding the 
total function f on the natural numhers. The term M encodes fXf. 

Proof: Consider the non-empty sequence S — f{i), f{i + 1), . . . , f{i + n), such that f{i + n) is 
the first element in the sequence that is equal to zero. Then 

rec (75^0,5^0) (Aa;.S(a;)) F ->* S"0 

We proceed by induction on the length of S. 
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• Basis: S = f{i). Thus 



rec (/(S^O),S^O) (Ax.S(x)) F 
rec (0, S'O) (Ax.S(x)) F 

• Induction: If 5 = /(i), /(i + 1), . . . , f{i + n), then f{i) > 0, therefore / i reduces to a term 
of the form (S t). Therefore 

rec (7(S^0),S^0) (Aa;.S(a;)) F 
^* rec {St,_S'0) (Ax.S(x)) F 
^* S(rec (7(S'+iO),S*+iO) (Aa;.S(a;)) F) 

(I.H.) 

S(S"-iO) = S"0 

Now, let j = mm{x E N | f{x) — 0}, and consider the sequence f{0),...,f{j). Therefore 
rec (/0,0) (Aa;.S(a;)) F S-'O. Note that, if there exists no x such that f{x) — 0, then 
rec (/0,0} (Aa;.S(a;)) F diverges, and so does the minimisation of /. □ 

Corollary 2 System C^ec is Turing complete. 

3.4 Unbounded recursion vs. iteration and minimisation 

There are two standard ways of extending the primitive recursive functions so that all partial 
recursive functions are obtained. One is unbounded minimisation, the other is unbounded recur- 
sion. For first-order functions (i.e., functions of type level 1), both methods are equivalent, see for 
instance Starting from System C we could add a minimiscr, with two reduction rules: 

Ai u / ^ u, fv(/) = 

ti{St)uf ^ ti{f [Su)) {Su) f fv{ftu)^0 

and a typing rule 

rh£<:N eh£u:N Ah£t;:N^N 

(Min) 

r,e, A h£ ^ t w w : N 

We will refer to this extension as System 

Theorem 6 (Properties of reductions in System 

1. Ifr\-ct:T then dom(r) = fv(t). 

2. Subject Reduction: IfT^ct-T and t — > t' then F t' : T. 

3. System is confluent: Ift — >* u and t — >* v then there is some term s such that u — >* s 
and V — >* s. 

Proof: 

1. By induction on the type derivation. 

2. Straightforward extension of the proof given for System C in 4 , by induction on the type 
derivation F i : T. We show the case where the term t is ^ s u f and there is a type 
derivation ending in: 

ri-£ s : N Qhcu-.N A l-£ / : N ^ N 
'■ (Min) 

r,e,A\-c ^^ s u f -.N 

If the reduction step takes place inside s, u or /, the result follows directly by induction. If 
reduction takes place at the root, we have two cases: 
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(a) n u f —i' u, with fv(/) = 0. Note that fv{fi u f) — fv(w) — dom{Q) by part 1, and 
we have |-£ u ; N. 

(b) {St) u f ^ n (/ (S u)) (S u) /, with fv(to/) = 0. Then (S t) u f) ^ 0, and 
we have: 

h£ S t : N l-£ u : N l-£ f : N ^3 N 

'■ (Min) 

h£ /i (S t) u / : N 

Therefore: 

|-£/:N^N hcSu:N l-£u:N 



|-£ /(S u) : N hz; S it : N h£ / : N ^ N 

^ (Min) 

h£ ^t (/(S u)) {Su) f:U 

3. Using Tait-Martin-Lof's method (see [10] for more details). 

□ 

To show Turing completeness of System we need to show that we can encode unbounded 
minimisation. 

First, we recall the following result from Kleene [¥T| . 

Theorem 7 (The Kleene normal form) Let h he a partial recursive function on N'"'. Then, 
a number n and two primitive recursive functions f , g can be found such that h{xi, . . . ,Xk) = 
f{tiy{g{n, xi,..., Xk,y)))h{xi,. . . , Xk) = /(ms("-, xi,..., Xk))). 

Therefore we only have to prove that we can encode minimisation of primitive recursive functions, 
and we can rely on the fact that primitive recursive functions can be encoded in System C. Below 
we give the encoding of minimisation for functions of arity 1 (the extension to functions of arity 
n > 1 is straightforward). 

Theorem 8 (Unbounded minimisation in System C^) If f : N — > N «s a primitive recursive 
function and f is its encoding in System Cf^, then 

fif = fi {70)0 J 

Proof: Similar to the proof for System Crec (Theorem [5]), considering the non-empty sequence 
S = f{i),f{i + 1), . . . , /(j), such that f{j) is the first element in the sequence that is equal to 
zero, and showing (by induction on the length of S) that: 

(7*) * 7 j- 

□ 

Corollary 3 System £^ is Turing complete. 

We can also encode System Crec into System simulating the recursor with iter and /i. Consider 
the following term: 

/ = An.pr J (iter n {t, t') {w o predj^) 

where predj^ is such that pred]^(S(t), t') — {t,t). The function /, given n, will produce pri{{w o 
predj^)"(t, t')). Now consider {fi t /), which will lead to the following sequence: 

fxtOf^^i /(I) ^f^^I f{2) 2 / ^ /i /(3) 3 / ^ ... ^ n 

where n is the minimum number such that {woprediY^ {t, t') produces (0, t"). Now, one can encode 
rec (t, t) u V w as: 

iter {fi t f) u V 
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Notice that rec {St,t') u v w will iterate v until w{t,t') is equal to zero, and that ji t Q f will 
count the number of iterations that will actually be necessary, or will go on forever if that never 
happens. 

£rec can be seen as a more compact version of System where the recursor can perform both 
bounded iteration or minimisation. Note that, in recursion theory, the minimiser cannot replace 
bounded iteration as we now show. 

Lemma 1 For any function f{xi, . . . n > 0, defined from the initial functions (0,5 and 

projections) and composition, without using the primitive recursive scheme, there is a constant k 
such that f{xi,X2, ■ ■ ■ , Xn) — Xi + k or f(x\,X2, ■ ■ ■ , Xn) — k. 

Proof: By structural induction. The base cases are trivial. Let us consider the composition case: 

1. The external function is 0. Then fc = 0. 

2. The external function is S. Then we have S{f{X)) for some function / (recall that X is 
notation for xi, . . . ,Xn)- By the induction hypothesis f{X) = Xi + k or f{X) = k. In the 
first case we have S{f{X)) = Xi + {k + 1) and in second case we have S{f{X)) = fc + 1. 

3. The external function is pr„. Then we have pr„(/i(X), . . . ,/„(X)) = fi{X). The result 
holds by the induction hypothesis for fi{X). 

4. The external function g is itself defined by composition. Then, by induction hypothesis, 
either g{fi{X), . . . , /„(X)) = fc, or . . . , /„(X)) - f,{X) '+ fc, in which case the 
result follows by induction on f^. 

□ 

Theorem 9 Minimisation applied to functions in the previous class either returns or is not 
defined. 

Proof: By the previous lemma, when f{xi, . . . , Xn) — 0, then cither it is the constant function 
returning 0, or it returns when the argument Xi = 0. In the first case fj,f returns 0, and in the 
second case either i = n and then fj,f returns 0, or /ij diverges. □ 

Another way to obtain Turing completeness of typed A-calculi is via fixpoint operators and 
conditionals, as done in PCF [S3]. We study in Section [S] the relation between C^ec and PCF. 

4 Evaluation strategies for System £rec 

In this section we define two evaluation strategies for System £rec and derive a stack-based abstract 
machine. 

Call-by-name The CBN evaluation relation for closed terms in System C^ec is defined in Table[SJ 
The notation t i). V means that the closed term t evaluates in System C^ec to the value V. Values 
are terms of the form 0, St, Xx.t and {s,t), i.e., weak head normal forms (whnf). Note that System 
Crec does not evaluate under an S symbol, since S is used as a constructor for natural numbers. 

The evaluation relation • J| • corresponds to standard reduction to weak head normal form. 
Recall that a reduction is called standard if the contraction of redexes is made from left-to-right 
(i.e., leftmost-outermost). It is well known that for the A-calculus [TU], the standard reduction is 
normalising, that is, if a term has a normal form, then it will be reached. A "standardisation" 
result holds for closed terms the following theorem shows. 

Theorem 10 If \-c t : T (i.e., t is a closed term in Crec) cind t has a whnf, then t ij-V , for some 
V. 
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is a value s i}. Xx.u u[t/x]il.V tJJ-(ii,i2) {Xxy .u)tit2 i)- V 

Val App Let 

Vi}.V sti}.V let {x,y) ^ t inu il-V 

t^{ti,t2) tilLO M-llV tJ|(ii,i2) tiJJ-Si' v{rez{w{t',t2))uvw)^V 

Reel Rec2 

r&c t u V w \\. V rec i w w ui JJ. y 

Table 5: CBN evaluation for System £rec 

Proof: We rely on Klop's result [?31[50], which states that leftmost-outermost reduction is normal- 
ising for left-normal orthogonal Combinatory Reduction Systems (CRSs). A CRS is orthogonal if 
its rules are left-linear (i.e., the left hand-sides of the rewrite rules contain no duplicated variables) 
and non-overlapping (there are no critical pairs) . A CRS is left- normal if on the left hand-sides of 
the rewrite rules, all the function symbols appear before the variables. The A-calculus is an exam- 
ple of a left-normal orthogonal CRS, as is System Crec- Therefore, leftmost-outermost reduction 
is normalising for £rec. The result follows, since CBN performs leftmost-outermost reduction. □ 

For open terms, the set of weak head normal forms includes more kinds of terms, since, for 
instance, reduction of an application will be blocked if the argument is open. However, for a given 
open term one can consider all the free variables as constants and proceed with closed reduction 
as shown in [24] (see also [12]). 

Call-by-value A call-by-value evaluation relation for System £rec can be obtained from the 
CBN relation by changing the rule for application, as usual. 

s JJ. Xx.u t JJ. V u[V' /x] J| V 

There is no change in the Rec and Let rules, since they rely on the App rule. Unlike CBN, 
the CBV strategy does not always reach a value, even if a closed term has one (Theorem [10] 
does not hold for a CBV strategy). For example, recall the term Yn in Section [331 and consider 
(Axy.rec (0, 0) / f (x, N) I)y){Y^I). This term has a value under the CBN strategy, but not under 
CBV. In fact, innermost strategies are normalising in an orthogonal system if and only if the 
system is itself strongly normalising. 

4.1 Stack machine for System £rec 

Intermediate languages that incorporate linearity have well known implementation advantages 
whether in compilers, static analysis, or whenever resources are limited [l?] [49] [TS] [57]. Based 
on these previous works, we finish this section by illustrating how simply System C^ec can be 
implemented as a stack machine. We show a call-by-name version, but it is straightforward to 
modify to other reduction strategies. 

The basic principle of the machine is to find the next redex, using a stack S to store future 
computations. The elements of the stack are terms in an extension of Crec which includes the 
following additional kinds of terms: LET{x,y,t), REC{u,v,w), REC{n,u,v,w), where x,y are 
variables and n, t, u, v, w are £rec terms. 

The configurations of the machine are pairs consisting of a term and a stack of extended terms. 
Unlike Krivine's machine or its variants (see for instance |35l [17] [26] ) we do not need to include an 
environment (sometimes called store, as in [57]) in the configurations. Indeed, the environment is 
used to store bindings for variables, but here as soon as a binding of a variable to a term is known 
we can replace the unique occurrence of that variable (the calculus is syntactically linear). In 
other words, instead of building an environment, we use "assignment" and replace the occurrence 
of the variable by the term. 

The transitions of the machine are given in Table [6] 
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(app) 


[MN, S) 




» (Af, N : S) 


(abs) 


{\x.M,N : S) 




^ {M[N/xlS) 


(let) 


(let {x,y) = N inM,5) 




^ {N, LET{x, y, M) : S) 


(pairl) 


{{N^,N2),LET[x,v,M): 


S) . 


> {M[N^/x][N2/ylS) 


(rec) 


(rec N U VW,S) 




» {N, RECiU, V, W) : S) 


(pair2) 


i{Ni,N2),RECiU,V,W) 


:5) = 


» ( A^i , REC {N2,U,V,W) : S) 


(zero) 


{0,REC'iT,U,V,W) : S) 




> {U,S) 


(suae) 


{S{N),REC'{T,U,V,W) 


■■s) = 


» (V^, (rec {W{N, T)) U V W) : S) 



Table 6: Stack machine for System C, 



For a program (closed term M), the machine is started with an empty stack: (M, []). The 
machine stops when no rule can apply. 

The use of "assignment" means that there is no manipulation (no copying, erasing, or even 
searching for bindings) in environments usually associated to these kinds of implementations. 

The correctness of the machine with respect to the CBN evaluation relation is proved by 
induction in the usual way. 

Theorem 11 // 1-£ t : T and there is a value V such that t i\-V, then {t, []) ^* {V, []). 

Proof: By induction on the evaluation relation, using Subject Reduction (Theorem [ij and the 
following property: 

If {t, S) {f, S') then {t, S o S") => {t\ S' o S"). 

This property is proved by induction on {t,S). Intuitively, since only the top of the stack is 
used to select a transition, it is clear that appending elements at the bottom of the stack does not 
affect the computation. □ 



5 Applications: Fixpoint operators and PCF 
5.1 The role of conditionals 

Recursive function definitions based on fixpoint operators rely on the use of a non-linear condi- 
tional that should discard the branch corresponding to an infinite computation. For instance, the 
definition of factorial: 

fact — y(A/n.cond n 1 {n * f{n — 1))) 

relies on the fact that cond will return 1 when the input number is 0, and discard the non- 
terminating "else" branch. Enabling the occurrence of the (bound) variable, used to iterate the 
function (/ in the above definition), in only one branch of the conditional is crucial for the definition 
of interesting recursive programs. This is why denotational linear versions of PCF J52j allow stable 
variables to be used non-linearly but not to be abstracted, since their only purpose is to obtain 
fixpoints. 

Fixpoint operators can be encoded in System Crec'- recall the term Yn in Section 13.31 More 
generally, for any type A we define the term 

r4==A/.rec (5(0), 0) M{A) f W 

where represents the term (Ax. let {y,z) = a; in (S(j/),z))). For every type A, Ya : {A^A)^A 
is well- typed in System Crec (see Figure [2]). Note that, for any closed term / of type A ^ A, we 
have: 

y^/^rec (5(0), 0) M{A) f W 

->* /(rec (let (y, z) = (0,0) in (5(2/), z)) MiA) f W) 
^ /(rec (5(0), 0) M{A) f W) = f{YAf) 
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h£ (S(0),0) : N ® N hcM{A):A f : A ^ Ahc f : A ^ A hcW:N(g)N^N(g)N 

f : A^Ahcrec (S(0), 0) M{A) f W : A 
he A/.rec (S(0), 0) M{A) f W : {A ^ A) ^ A 

Figure 2: Type derivation for Ya 

Although Ya behaves hke a fixpoint operator, one cannot write useful recursive programs using 
fixpoint operators alone (i.e. without a conditional): if we apply Ya to a linear function /, we 
obtain a non-normalisable term (recall the example in Section I3.3|) . Instead, in System £rec: 
recursive functions, such as factorial, can be easily encoded using rec: 

Xn.pr^{rec (n,0) (5(0), 5(0)) (Aa;.let {t,u) = x in F) I) 

where F = let (^1,^2) = t in (5 ii, mult u ^2) and is the duplicator term defined previously 
(see Definition [2]) . Note that, although conditionals are not part of System C^ec syntax, reduction 
rules for rec use pattern-matching. In the remainder of this section we show how we can encode 
in System £rec recursive functions defined using fixpoints. 

5.2 Encoding PCF in System £rec 

PCF (Programming Language for Computable Functions) |53j can be seen as a minimalistic typed 
functional programming language. It is an extension of the simply typed A-calculus with numbers, 
a fixpoint operator, and a conditional. Let us first recall its syntax. PCF is a variant of the typed 
A-calculus, with a basic type N for numbers and the following constants: 

• n : N, for n = 0, 1,2, . . . 

• SUGG, pred : N ^> N 

• iszero : N — > N, such that 

iszero — > 

iszero (n + 1) — > 1 

• for each type A, Gond^ : N ^ A ^ A ^ A, such that 

GondA u V u 
GondA {n + 1) u V v 

• for each type A, Ya : {A ^ A) ^ A, such that Ya/ f{YAf). 

Definition 3 PCF types and environments are translated into System Crec types using [■): 

(N) = N 
(A^B) = {A)^(B) 
(a;i: Ti,...,a;„: r„) = xi : (Ti), . . . , a;„ : (T^) 

Since System Crec is Turing complete, it is clear that any PCF program can be encoded in System 
Crec- We define below an encoding in System Crec for terms in PCF, inspired by the encoding of 
System T 4 . For convenience, we make the following abbreviations, where the variables xi and 
X2 are assumed fresh, and [x]t is defined below: 

C^}f' t = let {xi,X2) = D^x in t 
'Alt = {[x]t)[ylx] 
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(n) = S"0 

(succ) = An. rec (n,0) (SO) (Ax. Sec) / 

(pred) = Xn.pr^{rec (n,0) (0,0) (Xx.let {t,u) ^D^{pr^x) in(i,Su)) /) 

(iszero) = \n.pr^{vec (n,0) (0,S 0) {Xx.D^ipr^ x)) I) 

(Ya) = Xf.rec{S{0),0) M{{A)) f iXx.let{y,z)=x±n{S{y),z)) 

(condA) = Xtuv.rec (t, 0) u (Ax.(rec (0,0) / £{x, (A)) I)v) I 

{x) = x 

{uv) = {u){v) 

^ Xx.[x^](t) ifx£fv{t) 
Xx.{rec (0, 0) / Xy£{£{y, (B) -o (B))x, (A)) I)(t) otherwise 



(Xx^.t) = 



Table 7: PCF compilation into C, 



Definition 4 Let t be a PCF term such that fv(t) — {xi, . . . , Xn} and xi : Ai, . . . ,Xn ■ An \- t : A. 
The compilation into System C^ec, is defined as: [xf^] . . . [x^" ]{ti^, where (•) is defined in Table 
and for a term t and a variable x, such that x G fv(t), [x\t is inductively defined in the following 
way: 



x\{S u) 


= S([x]^) 






a;] a; 


= X 






'x]{Xy.u) 


= Xy.[x\u 












X 


e fv(s) n fv(u' 


x^\{su) 


-\ 


I (Ns)u 


X 


i fv(M) 






[s([a;]u) 


X 





Notice that [x\t is not defined for the entire syntax of System C^ec- The reason for this is 
that, although other syntactic constructors (like recursors or pairs ) may appear in t, they are the 
outcome of (•) and therefore are closed terms, where x does not occur free. 

Note that succ is not encoded as Xx.Sx, since £rec does not evaluate under A or S. We should not 
encode a divergent PCF program into a terminating term in Crec- In particular, the translation of 
condyi (succ(Fm/)) P Q is (cond^) ((succ)((Yn)/)) (P) (Q), which diverges (if we encode succ as 
Ax.Sx, then we obtain {Q), which is not right). 

Regarding abstractions or conditionals, the encoding is different from the one used in for 
System T in [4]. We cannot use the same encoding as in System C, where terms are erased by 
"consuming them" , because PCF, unlike System T, is not strongly normalising. The technique 
used here for erasing could have been used for System C, but erasing "by consuming" is preferred 
when possible (it reflects the work needed to erase a data structure). 

Also note that the second case in the encoding for abstractions (see Table [7]) uses a recursor 
on zero to discard the argument, where the function parameter is Xy.£{£{y, {B) ~o {B))x, {A)). 
The reason for this is that one cannot use x directly as the function parameter because that might 
make the term untypable, and just using £{x, {A)) would make the types work, but could encode 
strongly normalisable terms into terms with infinite reduction sequences (because £{x, {A)) might 
not terminate). For example, consider the encoding of {Xxy.y)Y[si. 

The translation of a typable PCF term is also typable in System C^ec (this is proved below). In 
particular, for any type A, the term (condA) is well-typed. In Figure|3l we show the type derivation 
for the encoding of the conditional (we use V to represent the term Ax. (rec (0, 0) / £{x, (A)) I)v). 

The type derivation for V depends on the fact that, if F l-£ t : ^, then for any type B, we have 
r h£ £{t, A) : B ^ B by Theorem[2l Note that the recursor on (0, 0) in V discards the remaining 
recursion (corresponding to the branch of the conditional that is not needed), returning Iv. 

We prove that the encoding respects types by induction. To make the induction work, we need 
to define and intermediate system where certain variables (not yet affected by the encoding) may 

^We omit the types of variables when they do not play a role in the compilation. 
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i : N h£ (t, 0) : N ® N u : {A) c u : {A) v: {A) ^ c V : {A) ^ {A) / : N N ^ N (g) N 

t : N, u : (A), t; : (A) h£ rec {t,Q) uV I : {A) 

h£ cond^ : N ^ (A) ^ {A) (A) 

Figure 3: Type derivation for condA 
Axiom and Structural Rule: 

/» . N T,x : A,y: B,A h.+x t : C 
J- 7 (Axio"i) : (Exchange) 

X : A h^+x x:A T,y: B,x : A, A h^+x t : C 

r l~£+x t : _B and x e X T,x : A,x : A \-^+x t : B and x € X 

— (Weakening) — (Contraction) 

T,x: A h^+x t:B T,x:A h^+x t : B 

Logical Rules: 

T,x : A\-^+x t : B T ^+x, t : A -o B A h^+x^ it : A 



(^Intro) ^ ^ (-oElim) 



r \-^+x Xx.t : A-o B r, A h +(xiux2) tu : B 

■i-rec i-rec 

r\-.+xit:A A\-^+x2u:B T h .+xi t : A B x : A,y : B, A \- .+X2 u : C 

^ ^ ((X)lntro) ^ =^ ((X)Elim) 

r, A l-^+(xiux2) {t,u) : A® B r, A l-^+(xiux2) let {x, y) =t ±nu : C 

Numbers: 



(Zero) 



r h^+x t : N 



^C+J : N p ^ S(t) : N 



(Succ) 



r h^+xi t : N » N Q'r^+x2u:A A \- ^+X3 v : A -o A E l-^+x4 w : N (g) N ^ N N 

(pg^) 

r, 0, A, E I- +(Xiux2ux3ux4) rec t u w w : ^ 



Table 8: Typing rules for System 



occur non-linearly. More precisely, we consider an extension to System £rec, which allows variables 
on a certain set X to appear non-linearly in a term. We call the extended system System C^^; 
it is defined by the rules in Table HI Intuitively, if X is the set of free- variables of t, then {t) 
will be a System C^ec term, except for the variables X = fv(i), which may occur non-linearly, and 
[a;i] . . . will be a typed System £rec term. We can prove the following results regarding 

System . 

Lemma 2 If T h^+x t : A, where dom{r) = fv{t) and x ^ X C fv{t), then T K,+x' [x]t : A, 
where X' = X \ {x} . 

Proof: By induction on t, using the fact that x : A h^+a D^x : A® A. We show the cases for 
variable and application. 

• t = X. Then [x]x — x, and using the axiom we obtain both x : A l-^+{x} x : A and 
X : A X : A. 

• t = uv, and x G fv(u), x ^ fv(u) (the case where x ^ fv{u), x G fv(w) is similar). Then 
[x]uv = {[x]u)v and T \-^+x uv : A. Let Fi = r|fy(-jj^ and F2 — r[fv(t,)- Then Fi l^£+x u : 
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F is a value s JJ-pcp V V't J|pcf V s is not a value u[t/x\ JJ-pcf V 
V ilpcF V s t ILpcF V {Xx.u) t JIpcf V 

t JJ,pcF i -U-pcF n + l t 4pcf »^ t JJ-PCF t JJ-pcf n + 1 

pred t JI-pcF pred t J|pcf succ t JJ-pcf jt- + 1 iszero f ^pcf iszero t JI-pcf 1 

t^PCFO u^^pcfV t^pcfu + l v^pcfV f{YAf) ^Pc?V 
condA tuv JJ-PCF V cond^ t uv J|pcf V Ya/ J|pcf V 

Table 9: CBN evaluation for PCF 

B ~o A and r2 v : B, where Fi and r2 can only share variables in X. By induction 

hypothesis Fi ^^+x' [x]u : B ^ A. Also, since x ^ fv(t;) and (iom(F2) = fv(u), we have 
Fa h^+x' V : B. Therefore F h^+x' {x[u])v : A. 

• t = uv, x € fv(u), and x £ fv(v). Let Fi — r|fy^^^y|^j and F2 = and assume C is 

the type associated to x in F. Then Fi, x : C l~£+^ u : B —o A and F2, x : C l~£+^ v : B. 
By induction hypothesis Fi, x : C l^£+x' [x\u : B —o A, and F2, x : C ^£+a" [x\v : B. Thus 
FijXi : C l^£+x' ([a;]u)[xi/a;] : B ^ A, and F2,X2 : C ^^+x' {[x]v)[x2/x] : B. Therefore 
Fi,xi : C,r2Tx2 ■■ C h^+x' {A%^u)iA'^^v) : A. Also x : C Dx : C ®C, therefore 

Fi,F2,a; : C h.+x' let {x[,X2) = Dx in {Alu){A%v) : A. 



□ 



Lemma 3 //F hpcF t : A, then {F|fy(^^) h^^f^^^^ (t) : (^1). 

Proof:By induction on the type derivation F hpcp t : A, 'as done for System T in [4]. 



□ 



Theorem 12 If t is a PCF term of type A under a set of assumptions F for its free variables 
{xi,.. .,Xn}, then (F|fy(j^) he [xi] . . . [x„](t) : {A) 

Proof: By induction on the number of free variables of t, using Lemmas [2]and[3l □ 

Using the encodings given above, it is possible to simulate the evaluation of a PCF program 
in System £rec- More precisely, if i is a closed PCF term of type N, which evaluates to v under a 
CBN semantics for PCF [S^, then the encoding of t reduces in System C^ec to the encoding of v, 
and evaluates under a CBN semantics to a value which is equal to the encoding of w. In Table [S] 
we recall the CBN rules for PCF: t J|pcf V means that the closed term t evaluates to the value V 
(a value is either a number, a A-abstraction, a constant, or a partially applied conditional). 

Lemma 4 (Substitution) Let t be a term in System Lrec- 

1. If X e fv(t), and fv(u) 0, then {t)[{u)/x] = {t[u/x]) 

2. Ifx e fv{t), then {[x]t)[u/x] ->* t[u/x]. 

Proof:By induction on t. □ 

Lemma 5 Let t be a closed PCF term. If t JJ-pcf V, then (t) — >* (V") . 

Proof: By induction on the evaluation relation, using a technique similar to the one used for 
System 7~ in [4]. Here we show the main steps of reduction for cond^ tuv where u, v are closed 
terms by assumption. 
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• If t -ILpcF 0: 



(cond .v t uv) = (cond \) {t) (u) {v) 

(I.H.) 

— cond^ (u) (u) 

(I.H.) 

->* {u) {V) 

• If i I^PCF n + l, let w' be the term (A2:.(rec (0,0) / £{x,A) I){v)): 

(cond^ tuv) = {condA> (S"+iO) (u) (w) 
^* rec (S"+iO,0) {u) v' I 

(I.H.) 

^* /(w) (i;) ^* {V). 

For application, we rely on the substitution lemmas above. Note that for an aplication ud, where 
M is a constant, we rely on the correctness of the encodings for constants, which can be easily 
prove by induction. For example, in the case of succ it is trivial to prove that, if i is a number 
S"0 in r.ec {n > 0), then rec (i, 0) (S 0) (Xx.Sx) I ^* S^+^O. □ 

Theorem 13 Let t be a closed PCF term. If t -IJ-pcf V, then 3V' such that (t) JJ. V , and 
V'=c,., {V). 

Proof: By Lemma [3 t ^pcp V implies (t) (V). By Theorem [H (<) 4J. V . Therefore, since 
JJ- C— !■* and the system is confluent (Thcorcm[T]), V' =c„c (^)- 

Lemma 6 Ifti^V and t ~c„^ u, then u ij,V' and V —c^^ V . 

Proof: By transitivity of the equality relation. □ 

Theorem 14 Let t be a closed PCF term. If {t) 4 V, then 3V' , such that, t 4pcf V and 
(V) =£.c V. 

Proof: By induction on the evaluation relation, using Lemma IHl Note that, if i is a value 
different from a partially applied conditional, the result follows because t — V' and (t) is also 
a value, i.e. (t) = V, therefore {t) = (V') ~ V. If t is an application uv then (t) = {u){v), 
therefore (u)(v) J| ^ if (u) JJ- Xx.s and s[(u)/x] JJ. V. If (u) JJ. Xx.s, then by I.H. u ]}-pcf W, and 
(W) —c,^^ Xx.s. Note that is a value of arrow type, which compilation equals an abstraction, 
therefore = Ax. s', pred, succ, iszero, Y, cond, cond p or cond p g. 

• If W — Xx.s' , we have two cases: 

- X e fv(s'): then (W) = Xx.[x]{s') =c,,, Xx.s, thus [x]{s') ^c„^ s. Since s[(i;)/a;] JJ- V 
and s[{v)/x\ [x\{s')[{v) / x] then, by Lemma [11 [x] (s') [(w>/2; {s')[{v)/x\, 
which, by Lemma [4lTl equals {s'[v/x\), therefore (by Lemma [6]) {s'[v/x\) JJ- V" , and 
V V". By I.H., s'[v/x\ JIpcf V and {V) = V, therefore uv JI-pcf V and 
{V) =£„c V" ^c,., V. 

- X ^ fv(s'): let v' represent the term Xy.£{S{y,{B) ^ {B))x,{A)). Then (W) = 
Ax. (rec (0,0) / v' I)(s') Xx.s, therefore (rec (0,0) / v' I)(s') =c,^ s. Note that 
s[{v)/x] = (rec {0 , 0) I v' [{v)/ x] I){s') and (rec (0,0) / v'[{v)/x] I){s') ij-V if {s') ij-V, 
then, since s'[i;/a;] — s' , by I.H., s' JI-pcf V and {V') =c„^ V, therefore uv JI-pcf V and 
{V) ~c,^c ^ required. 

• W = succ: then (W) = Ax. rec {x, 0) S (A.t.Sx) / =£^,, Ax.s, then rec (x, 0) S 1 (Ax.Sx) / =c„ 
s. Then s[(u)/x] = rec {(v},0) S (Ax.Sx) / and s[{v}/x] Jl- y if (v) Jl- W, in which case we 
have two possibilities: 
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- W = 0: then rec {{v),0) S {Xx.Sx) / J| V" if S J| in which case V = S 0. By I.H., 
V JIpcf W", and (W") =c,,^ 0, therefore W" = (0 is the only value of type N that 
compiles to 0). Therefore succ v JJ-pcf 1 and (1) = S V. 

- W ^ Sp: then rec ((w),0) S (Xx.Sx) I i]. V ii (Ax.Sx)(rec {p,0) S (Ax.Sx) /) ij. V. 
By I.H., V JIpcf VF", and (1^") =c„^ Sp, thus W^" = n+1 [W" is a number in PCF and it 
must different from 0, otherwise its compilation would be 0) and p =c,,^ S" 0. Note that 
(Aa;.Sa;)(rec (S" 0,0) S {Xx.Sx) I) 5"+^ 0, therefore, by Lemma|l V S"+20. 
Now it suffices to notice that succ v -IJ-rcf n + and (n + 2) = S"+^0 =c„^ V as 
required. 

• For pred and iszero, the proof is similar to the case of succ. 

• If W — Ya: let w' represent the term (Ay. let (2/1,2/2) = y in (S(yi),y2))- Then (W) = 
Xx.rec (S(0),0) M{{A)) x w' Xx.s, therefore rec (S(0),0) M{{A)) x w' =£^„ s. Then, 
since s[{v)/x] = rec (S(0),0) M{{A)) {v) w' , s[{v)/x] ij. V if {v){{Ya){v)) J| V (and 
{v)i{YA){v)) = {v{Yav))). Thus, by I.H. v{Yav) J|pcf V and {V) =c,,^ V, therefore 
Yav JIpcf V and {V) ~c,ec ^ as required. 

• W = cond^: let v' represent the term (Az.(rec (0,0) / £{z,(A)) I)q). Then (W) = 
Xxpq.rec {x,0) p v' I —c„^ Xx.s, therefore Xpq.rec {x,0) p v' I ~c,^^ s. Then s[(ti)/a;] = 
Apg.rec {(v},0) pv' I and s[(i')/a;] JJ, Xpq.rec {{v),0) p v' I. Note that cond^ v JJ-pcf condyi v, 
because it is a value, and (cond^ v) —c„c Xpq.rec {{v),0) p v' I. 

• W = cond^ pi: let v' represent the term (Az.(rec (0,0) / £{z,{A)) I)q). Then (W) = 
{Xxpq.rec {x,0) p v' I){pi) =c„c Xpq.rec {(pi),0) p v' I ~Crec Ax.s, therefore 

Apg.rec ((pi),0) p v' I =c,^^ s. Then s[(t;)/a;] — Xq.rec ((pi),0) {v) v' I and s[(t;)/x] JJ- 
Ag.rec {{pi),0) (v) v' I. Note that cond^ pi v -IJ-pcf cond/i pi v, because it is a value, and 
(condA Pi v) ^c„^ Ay. rec ((pi),0) (v) v' I. 

• W — cond^ pi P2: let v' represent the term (Az.(rec (0,0) / £{z, {A)) I)x). Then (W) = 
Xx.rec {(pi),0) (^2) v' I ~Crec ^x.s, therefore rec {{pi},0) (P2) v' I —c„^ s. Then s[(i;)/a;] = 
rec ((pi),0) (P2) v'[{v)/x\ I and s[(w)/a;] -IJ. ^ if (pi) |l- W' , in which case we have two 
possibilities: 

-W'^Q: then rec ((pi),0) {p2> v'[{v)lx\ I ii (^2) ^ V. By I.H., pi ^pcf W" , and 
{W") =c„, 0, therefore W" = (0 is the only value of type N that compiles to 0). Also 
by I.H, p2 JJ-pcF V and (V) V, therefore cond^i pi p2 v -IJ-pcf V , thus uv JJ-pcf V , 
and (V) —c„^ V as required. 

-W' = Sp': then rec {{pi),0) {p2> v'[{v)/x] I V if {v) 4 V. By I.H., pi ^pcf W" , 
and (W") =c,ec Sp', thus W" = n + 1 {W" is a number in PCF and it must different 
from 0, otherwise its compilation would be 0). Also by I.H, t -IJ-pcf V and {V') V, 
therefore cond^ pi P2 v JJ-pcf V and (V) =c„c ^ as required. 

□ 

This completes the proof of soundness and completeness of the encoding. 

Note that the terms of the form rec (0, 0) I t I used in the encoding of conditionals and A- 
abstractions allow us to discard terms without evaluating them. This is a feature of the encoding, 
otherwise terminating programs in PCF could be translated to non-terminating programs in Sys- 
tem Crec- This differs from the definition of erasing given in Section [31 where terms are consumed 
and not discarded (in pure linear systems functions do not discard their arguments). However, 
allowing terms to be discarded without being evaluated, is crucial when defining recursion based 
on fixpoints. 

Once a PCF term is compiled into Crec it can be implemented using the techniques in Section 
m thus we obtain a new stack machine implementation of PCF. 
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6 Conclusions 



Our work previously investigated linear primitive recursive functions, and a linear version of 
Godel's System T- This paper shows how the essential ideas can be extended to general recursion, 
as found in programming languages. Crec is a syntactically linear calculus, but only the fragment 
without the recursor is operationally linear. The linear recursor allows us to encode duplicating 
and erasing, thus playing a similar role to the exponentials in linear logic. It encompasses bounded 
recursion (iteration) and minimisation in just one operator, thus C^ec can be seen as an alternative 
way to recover the power of the A-calculus within a linear system. The meaning of this linear 
recursor will be further analysed in a denotational setting in future work. 

The pragmatical impact of these results is currently being investigated within the language 
Lilac 49 . Other work that is currently being investigated includes the relationship with calculi 
for explicit computational complexity. For instance, closed construction in System C (that is, the 
requirement that in any iterator term the function to be iterated must be closed when the term is 
constructed, as opposed to being closed at the moment of reduction) gives PR functions [H] , but 
closed construction does not affect System C^ec (the encoding of /i is closed). 
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